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DETAILED ACTION 
Response to Amendment 

1 . This action is in response to the amendment received on October 30, 2007. 
Claims 1-23 were originally received for consideration. Per the received amendment, 
claims 7, and 14-23 are cancelled and claims 24-25 have been added. 

2. Claims 1-6, 8-13, and 24-25 are currently pending consideration. 

Information Disclosure Statement 

3. An initialed and dated copy of Applicant's IDS form 1449, received on 
10/30/2007, is attached to this Office action. 

Response to Arguments 

Applicant's arguments with respect to claims 1-6, 8-13, and 24-25 have been 
considered but are moot in view of the new ground(s) of rejection. 

Specification 



4. The titles of the various sections do not conform to the preferred headings for the 
sections. For example, the preferred heading for the section entitled "Prior Art" is 
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Background of the Invention" and the preferred heading for the section entitled 
"Description of embodiments" is "Detailed Description of the Invention." 



The following guidelines illustrate the preferred layout for the specification of a 
utility application. These guidelines are suggested for the applicant's use. 



Arrangement of the Specification 

As provided in 37 CFR 1.77(b), the specification of a utility application should 
include the following sections in order. Each of the lettered items should appear in 
upper case, without underlining or bold type, as a section heading. If no text follows the 
section heading, the phrase "Not Applicable" should follow the section heading: 

(a) TITLE OF THE INVENTION. 

(b) CROSS-REFERENCE TO RELATED APPLICATIONS. 

(c) STATEMENT REGARDING FEDERALLY SPONSORED RESEARCH OR 

DEVELOPMENT. 

(d) THE NAMES OF THE PARTIES TO A JOINT RESEARCH AGREEMENT. 

(e) INCORPORATION-BY-REFERENCE OF MATERIAL SUBMITTED ON A 

COMPACT DISC. 

(f) BACKGROUND OF THE INVENTION. 

(1) Field of the Invention. 

(2) Description of Related Art including information disclosed under 37 
CFR 1.97 and 1.98. 

(g) BRIEF SUMMARY OF THE INVENTION. 

(h) BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWING(S). 

(i) DETAILED DESCRIPTION OF THE INVENTION. 

(j) CLAIM OR CLAIMS (commencing on a separate sheet). 

(k) ABSTRACT OF THE DISCLOSURE (commencing on a separate sheet). 

(I) SEQUENCE LISTING (See MPEP § 2424 and 37 CFR 1.821-1.825. A 
"Sequence Listing" is required on paper if the application discloses a 
nucleotide or amino acid sequence as defined in 37 CFR 1.821(a) and if 
the required "Sequence Listing" is not submitted as an electronic 
document on compact disc). 



Claim Rejections - 35 USC § 101 
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35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof, may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

5. Claim 6 is rejected under 35 U.S.C. 101 because the claimed invention is 

directed to non-statutory subject matter. Claim 7 claims a "carrier" which is not defined 

explicitly in the specification. On page 9, line 15, of the specification, it is stated "the 

information carrier (chip) is checked." However, this chip is not used to carry the 

computer program of claim 6, but the biometric information. So this disclosure of an 

information carrier is not interpreted to be the same as the "carrier" of claim 7. 

Therefore, the carrier of claim 7 could be interpreted as being a carrier wave or a signal, 

which is not statutory. A signal, a form of energy, does not fall within either of the two 

definitions of manufacture, and thus, a signal does not fall within one of the four 

statutory classes of § 101 (see Interim Guidelines for Examination of Patent 

Applications for Patent Subject Matter Eligibility, page 57). 



Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C, 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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6. Claims 1-2, 5-12, and 15-19 rejected under 35 U.S.C. 103(a) as being 
unpatentable over Burger (U.S. Patent 6,219,439) in view of Trench (U.S. Patent 
Publication No. US 2005/0154877 A1) in further in view of Chen et al. (U.S. Patent 
5,694,471). 

Regarding claim 1, Burger discloses: 

System for reading a document comprising a card provided with machine- 
readable holder details in a machine readable zone and for establishing whether a 
person presenting the document has predetermined right, which document at least 
contains a chip containing biometric data (column 5, lines 32-26: user fingerprint 
information stored on ctiip) on a holder as well as data with a predetermined 
relationship to the machine readable holder details in the machine readable zone, and 
wherein the system comprises: 

a reader for reading the chip (Figure 1, item 12, column 6, lines 13-16: the 
reader "scans the user's fingerprint and compares it against the stored template of the 
same print on the smart card')] 

a memory containing details with regard to the predetermined right of the holder 
(column 5, lines 36-37: identification data stored in chip memory)] 

a biometric feature scanner arranged to scan a biometric feature of the holder 
and to generate scanned biometric data (Figure 1, item 16, column 5, lines 8-13: 
"fingerprint scanner plateny, 
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a processing unit that is connected to the reader, the memory and the biometric 
feature scanner (column 5, lines 50-58, column 6, lines 13-18: authentication done on 
board reader) and is equipped to: 

receive the biometric data on the holder from the chip, from the reader (column 5, 
lines 34-37, column 6, lines 13-16: ttie fingerprint data on the chip is read and 
compared to the input fingerprint)] 

receive the biometric data on the person presenting the document from the 
biometric feature scanner (column 5, lines 50-51: user places finger on fingerprint 
scanner) and to compare these with the biometric data on the holder to determine 
whether the person presenting the document is the holder (column 5, lines 50-55: 
compare input fingerprint with stored fingerprint data to determine if user is authentic)] 

receive the holder details via the reader (column 5, lines 36-37: "identification 
data"), check the predetermined relationship between the holder details and the data 
(column 5, lines 50-55: authenticating user) and read the predetermined right of holder 
from the memory (column 6, lines 45-51 : wherein the user identification memory 
(predetermined right) is used to determine if the user is able to gain entry)] 

provide a signal to indicate the predetermined right for the person presenting the 
document if the chip and the data are authentic, the predetermined relationship has 
been established and the person presenting the document is the same as the holder 
(column 7, lines 46-51), wherein the response (signal) is sent to a gateway indicating 
whether access is penvitted. 
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Burger does not explicitly disclose that the processing unit establishes the authenticity 
of the chip and the data with the aid of a public key encryption technology. Trench 
discloses a system wherein a chip card contains a private key (Trench: Figure 2, item 
104), which is used in a challenge along with a public key to determine if the chip card is 
authentic (Trench: paragraph 0026, lines 1-12). Burger and Trench are analogous arts 
as both use chip cards to authenticate a user. Trench uses this challenge system to 
assure that the chip card is authentic before letting the user proceed with a transaction 
(Trench: paragraph 0026, lines 10-11). This challenge-response using the private- 
public key technology could be used in the system of Burger after the biometric input is 
compared to authenticate the user. In the system of Burger, after the authentication of 
the user, the user identification data is read from the chip and sent to a gateway 
(Burger: column 6, lines 44-51). The gateway could then send a challenge to the user 
to verify that the chip is also authentic, as in the system of Trench, which using the 
method of Trench, the user can use the stored private key to respond to the challenge 
to verify that the chip is also authentic and allow the transaction to proceed (Trench: 
paragraph 0026: lines 1-12). Therefore, it would have been obvious to one of ordinary 
skill in the art at the time of invention to use the public-private encryption method of 
Trench into the system of Burger so that a merchant "can be assured that the user is 
the legitimate certificate holder and that the user certificate belongs to the user" 
(Trench: paragraph 0026, lines 8-11) and so that the merchant can "confidently accept 
the chip card from the user" (Trench: paragraph 0026, lines 11-12). 
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Burger and Trench do not explicitly teach reading the machine readable holder 
details from a machine readable zone and checking the predetermined relationship of 
the data to the machine readable holder details. Chen discloses a system wherein a 
card stores issuer identification information (holder details) and a key which it uses to 
perform a one-way hash function on the user information data (Chen: column 6, lines 
50-54, column 7, lines 57-63) and then the authentication unit performs its own 
checksum on the issuer identification number and compares the results to authenticate 
the user (Chen: column 7, lines 18-29). Burger discloses a key that is stored on the 
card, so this key can be used to perform the hash value on the user information to 
create a hash, which is then compared to a hash of the results at the gateway of Burger 
using the process of Chen (predetermined relationship to the holder details). Burger, 
Trench, and Chen are analogous arts as all use chip cards for the purposes of 
authenticating a user. It would have been obvious to use the one-way hashing function 
of Chen to authenticate the user information in the system of Burger-Trench because 
the use of a one-way function because it "makes it impossible to work backwards to 
determine the checksum" (Chen: column 4, lines 9-14). 

Claim 2 is rejected as applied above in rejecting claim 1 . Furthermore, Burger 
discloses: 

System according to claim 1 , wherein the document is a travel document (column 
6, lines 43-46), wherein the smart card (document) could operate as a driver's license. 
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Claim 3 is rejected as applied above in rejecting claim 1 . Burger and Trench do not 
explicitly teach comparing the holder's details using a one-way function, with holder's 
details stored in the memory. Burger discloses that the user information is encrypted on 
the card but does not explicitly state that it the user information is subject to a one-way 
function. Chen discloses a system wherein a chip card stores issuer identification 
information and a key which it uses to perform a one-way hash function on the data 
(Chen: column 6, lines 50-54) and then the authentication unit performs its own 
checksum on the issuer identification number and compares the results to authenticate 
the user (Chen: column 7, lines 18-29). Burger discloses a key that is stored on the 
card, so this key can be used to perform the hash value on the user information to 
create a hash, which is then compared to a hash of the results at the gateway of Burger 
using the process of Chen. Burger, Trench, and Chen are analogous arts as all use 
chip cards for the purposes of authenticating a user. It would have been obvious to use 
the one-way hashing function of Chen to authenticate the user information in the system 
of Burger-Trench because the use of a one-way function because it "makes it 
impossible to work backwards to determine the checksum" (Chen: column 4, lines 9- 
14). 



Claim 4 is rejected as applied above in claim 3. Furthermore, the system of Burger- 
Trench-Chen teaches that the one-way function is a hashing function (Chen: column 6, 
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lines 50-54), wherein a on-way hashing function is performed on the user identification 
information. 

Regarding claim 5, Burger discloses: 

Method for reading a document provided with machine-readable holder details in 
a machine readable zone and for establishing whether a person presenting the 
document has a predetermined right, which document contains at least one chip 
containing biometric data (column 5, lines 32-26: user fingerprint information stored on 
chip) on a holder as well as data having a predetermined relationship to the machine 
readable holder details, and wherein the system comprises a reader for reading the chip 
and for reading the machine-readable holder details (Figure 1, item 12, column 6, lines 
1 3-16: the reader "scans the user's fingerprint and compares it against the stored 
template of the same print on the smart card'), a memory containing data on the 
predetermined right of the holder (column 5, lines 36-37: identification data stored in 
chip memory), a biometric feature scanner arranged to scan a biometric feature of the 
holder and to generate scanned biometric data (Figure 1, item 16, column 5, lines 8-13: 
"fingerprint scanner platen') and a processing unit that is connected to the reader, the 
memory, and the biometric feature scanner (column 5, lines 50-58, column 6, lines 13- 
18: authentication done on board reader), wherein the method comprises the following 
operations: 
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receipt of the biometric data on the holder from the chip (column 5, lines 34-37, 
column 6, lines 1 3-16: the fingerprint data on the chip is read and compared to the 
input fingerprint); 

receipt of the biometric data on the person presenting the document (column 5, 
lines 50-51 : user places finger on fingerprint scanner) and comparison with the 
biometric data on the holder to determine whether the person presenting the document 
is the holder (column 5, lines 50-55: compare input fingerprint with stored fingerprint 
data to detemiine if user is authentic); 

receipt of the holder details (column 5. lines 36-37: "identification data"), 
checking of the specific relationship between the holder details and the data (column 5, 
lines 50-55: authenticating user) and reading the predetermined right of the holder from 
the memory (column 6, lines 45-51 : wherein the user identification memory 
(predetenvined right) is used to detenvine if the user is able to gain entry); 

provision of a signal to indicate the predetermined right for the person presenting 
the document if the chip and the data are authentic, the predetermined relationship has 
been established and the person presenting the document is the same as the holder 
(column 7, lines 46-51), wherein the response (signal) is sent to a gateway indicating 
whether access is permitted. 

Burger does not explicitly disclose establishment of the authenticity of the chip and the 
data with the aid of a public key encryption technology. Trench discloses a system 
wherein a chip card contains a private key (Trench: Figure 2, item 104), which is used 



Application/Control Number: Page 12 

10/518,415 

Art Unit: 2131 

in a challenge along with a public key to determine if the chip card is authentic (Trench: 
paragraph 0026, lines 1-12). Burger and Trench are analogous arts as both use chip 
cards to authenticate a user. Trench uses this challenge system to assure that the chip 
card is authentic before letting the user proceed with a transaction (Trench: paragraph 
0026, lines 10-11). This challenge-response using the private-public key technology 
could be used in the system of Burger after the biometric input is compared to 
authenticate the user. In the system of Burger, after the authentication of the user, the 
user identification data is read from the chip and sent to a gateway (Burger: column 6, 
lines 44-51). The gateway could then send a challenge to the user to verify that the 
chip is also authentic, as in the system of Trench, which using the method of Trench, 
the user can use the stored private key to respond to the challenge to verify that the 
chip is also authentic and allow the transaction to proceed (Trench: paragraph 0026: 
lines 1-12). Therefore, it would have been obvious to one of ordinary skill in the art at 
the time of invention to use the public-private encryption method of Trench into the 
system of Burger so that a merchant "can be assured that the user is the legitimate 
certificate holder and that the user certificate belongs to the user" (Trench: paragraph 
0026, lines 8-11) and so that the merchant can "confidently accept the chip card from 
the user" (Trench: paragraph 0026, lines 11-12). 

Burger and Trench do not explicitly teach reading the machine readable holder 
details from a machine readable zone and checking the predetermined relationship of 
the data to the machine readable holder details. Chen discloses a system wherein a 
card stores issuer identification information (holder details) and a key which it uses to 
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perform a one-way hash function on the user information data (Chen: column 6, lines 
50-54, column 7, lines 57-63) and then the authentication unit performs its own 
checksum on the issuer identification number and compares the results to authenticate 
the user (Chen: column 7, lines 18-29). Burger discloses a key that is stored on the 
card, so this key can be used to perform the hash value on the user information to 
create a hash, which is then compared to a hash of the results at the gateway of Burger 
using the process of Chen (predetermined relationship to the holder details). Burger, 
Trench, and Chen are analogous arts as all use chip cards for the purposes of 
authenticating a user. It would have been obvious to use the one-way hashing function 
of Chen to authenticate the user information in the system of Burger-Trench because 
the use of a one-way function because it "makes it impossible to work backwards to 
determine the checksum" (Chen: column 4, lines 9-14). 

Regarding claim 6, Burger discloses: 

Data carrier comprising a computer program that can be loaded by a system for 
reading a document comprising a card provided with machine-readable holder details in 
a machine-readable zone and for establishing whether a person presenting the 
document has a predetermined right, which document contains at least one chip 
containing a biometric data on a holder (column 5, lines 32-26: user fingerprint 
information stored on chip) as well as data having a predetermined relationship to the 
holder details, and wherein the system comprises a reader for reading the chip and the 
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machine-readable holder details (Figure 1, item 12, column 6, lines 13-16: the reader 
"scans the user's fingerprint and compares it against the stored template of the same 
print on the smart card'), a memory containing data on the predetermined right of the 
holder (column 5, lines 36-37: identification data stored in chip memory), a biometric 
feature scanner and a processing unit that is connected to the reader, the memory and 
the biometric feature scanner (Figure 1 , item 16, column 5, lines 8-13: "fingerprint 
scanner platen'), wherein the computer program can provide the system with the 
following functionality: 

receipt of the biometric data on the holder from the chip (column 5, lines 34-37, 
column 6, lines 1 3-16: the fingerprint data on the chip is read and compared to the 
input fingerprint); 

receipt of the biometric data on the person presenting the document (column 5, 
lines 50-51: user places finger on fingerprint scanner) and comparison with the 
biometric data on the holder to determine whether the person presenting the document 
is the holder (column 5, lines 50-55: compare input fingerprint with stored fingerprint 
data to determine if user is authentic); 

receipt of the holder details (column 5, lines 36-37: "identification data"), 
checking of the specific relationship between the holder details and the data (column 5, 
lines 50-55: authenticating user) and reading the predetermined right of the holder from 
the memory (column 6, lines 45-51 : wherein the user identification memory 
(predetenvined right) is used to determine if the user is able to gain entry); 
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provision of a signal to indicate the predetermined right for the person presenting 
the document if the chip and the data are authentic, the predetermined relationship has 
been established and the person presenting the document is the same as the holder 
(column 7, lines 46-51), wherein the response (signal) is sent to a gateway indicating 
whether access is permitted. 

Burger does not explicitly disclose establishment of the authenticity of the chip and the 
data with the aid of a public key encryption technology. Trench discloses a system 
wherein a chip card contains a private key (Trench: Figure 2. item 104), which is used 
in a challenge along with a public key to determine if the chip card is authentic (Trench: 
paragraph 0026, lines 1-12). Burger and Trench are analogous arts as both use chip 
cards to authenticate a user. Trench uses this challenge system to assure that the chip 
card is authentic before letting the user proceed with a transaction (Trench: paragraph 
0026, lines 10-11). This challenge-response using the private-public key technology 
could be used in the system of Burger after the biometric input is compared to 
authenticate the user. In the system of Burger, after the authentication of the user, the 
user identification data is read from the chip and sent to a gateway (Burger: column 6, 
lines 44-51). The gateway could then send a challenge to the user to verify that the 
chip is also authentic, as in the system of Trench, which using the method of Trench, 
the user can use the stored private key to respond to the challenge to verify that the 
chip is also authentic and allow the transaction to proceed (Trench: paragraph 0026: 
lines 1-12). Therefore, it would have been obvious to one of ordinary skill in the art at 
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the time of invention to use the public-private encryption method of Trench into the 
system of Burger so that a merchant "can be assured that the user is the legitimate 
certificate holder and that the user certificate belongs to the user" (Trench: paragraph 
0026, lines 8-11) and so that the merchant can "confidently accept the chip card from 
the user" (Trench: paragraph 0026, lines 11-12). 

Burger and Trench do not explicitly teach reading the machine readable holder 
details from a machine readable zone and checking the predetermined relationship of 
the data to the machine readable holder details. Chen discloses a system wherein a 
card stores issuer identification information (holder details) and a key which it uses to 
perform a one-way hash function on the user information data (Chen: column 6, lines 
50-54, column 7, lines 57-63) and then the authentication unit performs its own 
checksum on the issuer identification number and compares the results to authenticate 
the user (Chen: column 7, lines 18-29). Burger discloses a key that is stored on the 
card, so this key can be used to perform the hash value on the user information to 
create a hash, which is then compared to a hash of the results at the gateway of Burger 
using the process of Chen (predetermined relationship to the holder details). Burger, 
Trench, and Chen are analogous arts as all use chip cards for the purposes of 
authenticating a user. It would have been obvious to use the one-way hashing function 
of Chen to authenticate the user information in the system of Burger-Trench because 
the use of a one-way function because it "makes it impossible to work backwards to 
determine the checksum" (Chen: column 4, lines 9-14). 
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Claim 8 is rejected as applied above in rejecting claim 1 . Furthermore, Burger 
discloses: 

Document comprising a card provided with machine-readable holder details and 
a chip, which chip is provided with a processing unit and memory connected thereto and 
an input/output unit (column 5, lines 50-58, column 6, lines 13-18: authentication done 
on board reader), wherein the memory contains biometric data on a holder (column 5, 
lines 32-26: user fingerprint information stored on chip), as well as data that have a 
predetermined relationship to the holder details (column 6, lines 45-51: wherein the 
user identification memory (predetermined right) is used to determine if the user is able 
to gain entry), as well as instructions for making the processing unit carry out the 
following instructions: 

transmission of the biometric data on the holder and the data from the memory to 
the system (column 5, lines 50-55: compare input fingerprint with stored fingerprint data 
to determine if user is authentic) . 

Burger does not explicitly disclose establishment of the authenticity of the chip and the 
data with the aid of a public key encryption technology. Trench discloses a system 
wherein a chip card contains a private key (Trench: Figure 2, item 104), which is used 
in a challenge along with a public key to determine if the chip card is authentic (Trench: 
paragraph 0026, lines 1-12). Burger and Trench are analogous arts as both use chip 
cards to authenticate a user. Trench uses this challenge system to assure that the chip 
card is authentic before letting the user proceed with a transaction (Trench: paragraph 
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0026, lines 10-11). This challenge-response using the private-public key technology 
could be used in the system of Burger after the biometric input is compared to 
authenticate the user, in the system of Burger, after the authentication of the user, the 
user identification data is read from the chip and sent to a gateway (Burger: column 6, 
lines 44-51). The gateway could then send a challenge to the user to verify that the 
chip is also authentic, as in the system of Trench, which using the method of Trench, 
the user can use the stored private key to respond to the challenge to verify that the 
chip is also authentic and allow the transaction to proceed (Trench: paragraph 0026: 
lines 1-12). Therefore, it would have been obvious to one of ordinary skill in the art at 
the time of invention to use the public-private encryption method of Trench into the 
system of Burger so that a merchant "can be assured that the user is the legitimate 
certificate holder and that the user certificate belongs to the user" (Trench: paragraph 
0026, lines 8-1 1 ) and so that the merchant can "confidently accept the chip card from 
the user" (Trench: paragraph 0026, lines 1 1-12). 

Burger and Trench do not explicitly teach reading the machine readable holder 
details from a machine readable zone and checking the predetermined relationship of 
the data to the machine readable holder details. Chen discloses a system wherein a 
card stores issuer identification information (holder details) and a key which it uses to 
perform a one-way hash function on the user information data (Chen: column 6, lines 
50-54, column 7, lines 57-63) and then the authentication unit performs its own 
checksum on the issuer identification number and compares the results to authenticate 
the user (Chen: column 7, lines 18-29). Burger discloses a key that is stored on the 
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card, so this key can be used to perform the hash value on the user information to 
create a hash, which is then compared to a hash of the results at the gateway of Burger 
using the process of Chen (predetermined relationship to the holder details). Burger, 
Trench, and Chen are analogous arts as all use chip cards for the purposes of 
authenticating a user. It would have been obvious to use the one-way hashing function 
of Chen to authenticate the user information in the system of Burger-Trench because 
the use of a one-way function because it "makes it impossible to work backwards to 
determine the checksum" (Chen: column 4, lines 9-14). 

Claim 9 is rejected as applied above in rejecting claim 8. Furthermore, Burger 
discloses: 

Document according to claim 8, wherein the document is a travel document 
(column 5, lines 43-46), wherein the smart card (document) could operate as a driver's 
license. 

Claim 10 is rejected as applied above in rejecting claim 9. Furthermore, Burger 
discloses: 

Document according to claim 9, wherein the chip is an integral part of the travel 
document (column 5, lines 43-46), wherein the smart card (document) could operate as 
a driver's license and is used for authenticating the holder 
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Claim 1 1 is rejected as applied above in rejecting claim 8. Furthermore, Burger 
discloses: 

Document according to claim 8, wherein the input/output unit is equipped for 
contact-free communication (column 4, lines 65-66). wherein the smart card can be 
contactless. 

Claim 12 is rejected as applied above in rejecting claim 8. Furthermore, Burger 
discloses: 

Document according to claim 8, wherein the chip is equipped as a transponder 
unit (column 4, lines 65-66), wherein the smart card can be contactiess, which means 
that the RFID tag acts as a transponder 

Claim 3 is rejected as applied above in rejecting claim 1 . Burger and Trench do not 
explicitly teach comparing the holder's details using a one-way function, with holder's 
details stored in the memory. Burger discloses that the user information is encrypted on 
the card but does not explicitly state that it the user information is subject to a one-way 
function. Chen discloses a system wherein a chip card stores issuer identification 
information and a key which it uses to perform a one-way hash function on the data 
(Chen: column 6, lines 50-54) and then the authentication unit performs its own 
checksum on the issuer identification number and compares the results to authenticate 
the user (Chen: column 7, lines 18-29). Burger discloses a key that is stored on the 
card, so this key can be used to perform the hash value on the user information to 
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create a hash, which is then connpared to a hash of the results at the gateway of Burger 
using the process of Chen, Burger, Trench, and Chen are analogous arts as all use 
chip cards for the purposes of authenticating a user. It would have been obvious to use 
the one-way hashing function of Chen to authenticate the user information in the system 
of Burger-Trench because the use of a one-way function because it "makes it 
impossible to work backwards to determine the checksum" (Chen: column 4, lines 9- 
14). 

Claim 4 is rejected as applied above in claim 3. Furthermore, the system of Burger- 
Trench-Chen teaches that the one-way function is a hashing function (Chen: column 6, 
lines 50-54), wherein a on-way hashing function is performed on the user identification 
information. 

Claim 13 is rejected as applied above in rejecting claim 8. Burger and Trench do not 
explicitly teach that the predetermined relationship is based on hashing the holder's 
details. Burger discloses that the user information is encrypted on the card but does not 
explicitly state that it the user information is subject to a one-way function. Chen 
discloses a system wherein a chip card stores issuer identification information and a key 
which it uses to perform a one-way hash function on the data (Chen: column 6, lines 
50-54) and then the authentication unit performs its own checksum on the issuer 
identification number and compares the results to authenticate the user (Chen: column 
7, lines 18-29). Burger discloses a key that is stored on the card, so this key can be 
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used to perform the hash value on the user information to create a hash, which is then 
compared to a hash of the results at the gateway of Burger using the process of Chen. 
Burger, Trench, and Chen are analogous arts as all use chip cards for the purposes of 
authenticating a user. It would have been obvious to use the one-way hashing function 
of Chen to authenticate the user information in the system of Burger-Trench because 
the use of a one-way function because it "makes it impossible to work backwards to 
determine the checksum" (Chen: column 4, lines 9-14). 

Claim 24 is rejected as applied above in rejecting claim 1. Furthermore, Burger 
discloses: 

System according to claim 1, wherein the chip comprises a biocertificate 
containing the biometric data on the holder as well as the data with a predetermined 
relationship to the machine readable holder details in the machine readable zone 
(column 5, lines 45-55), wherein the fingerprint data is stored. 

Claim 25 is rejected as applied above in rejecting claim 1 . Burger and Trench do not 
explicitly teach wherein the processing unit is equipped to check the predetermined 
relationship between the machine readable holder details in the machine readable zone 
and the data with the predetermined relationship to the machine readable holder details 
by performing a hashing operation to the machine readable holder details in the 
machine readable zone. 



Application/Control Number: Page 23 

10/518,415 

Art Unit: 2131 

Burger and Trench do not explicitly teach reading the machine readable holder 
details from a machine readable zone and checking the predetermined relationship of 
the data to the machine readable holder details. Chen discloses a system wherein a 
card stores issuer identification information (holder details) and a key which it uses to 
perform a one-way hash function on the user information data (Chen: column 6, lines 
50-54, column 7, lines 57-63) and then the authentication unit performs its own 
checksum on the issuer identification number and compares the results to authenticate 
the user (Chen: column 7, lines 18-29). Burger discloses a key that is stored on the 
card, so this key can be used to perform the hash value on the user information to 
create a hash, which is then compared to a hash of the results at the gateway of Burger 
using the process of Chen (predetermined relationship to the holder details). Burger, 
Trench, and Chen are analogous arts as all use chip cards for the purposes of 
authenticating a user. It would have been obvious to use the one-way hashing function 
of Chen to authenticate the user information in the system of Burger-Trench because 
the use of a one-way function because it "makes it impossible to work backwards to 
determine the checksum" (Chen: column 4, lines 9-14). 

Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 
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A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Kaveh Abrishamkar whose telephone number is 571- 
272-3786. The examiner can normally be reached on Monday thru Friday 8-5. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Ayaz Sheikh can' be reached on 571-272-3795. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. . 

KA 

01/06/2007 
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